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Abstract: Recently, the diagnosability of stochastic discrete event systems (SDESs) was 
investigated in the literature, and, the failure diagnosis considered was centralized. In 
this paper, we propose an approach to decentralized failure diagnosis of SDESs, where the 
stochastic system uses multiple local diagnosers to detect failures and each local diagnoser 
possesses its own information. In a way, the centralized failure diagnosis of SDESs can 
be viewed as a special case of the decentralized failure diagnosis presented in this paper 
with only one projection. The main contributions are as follows: (1) We formalize the 
notion of codiagnosability for stochastic automata, which means that a failure can be de- 
tected by at least one local stochastic diagnoser within a finite delay. (2) We construct a 
codiagnoser from a given stochastic automaton with multiple projections, and the codi- 
agnoser associated with the local diagnosers is used to test codiagnosability condition of 
SDESs. (3) We deal with a number of basic properties of the codiagnoser. In particular, a 
necessary and sufficient condition for the codiagnosability of SDESs is presented. (4) We 
give a computing method in detail to check whether codiagnosability is violated. And (5) 
some examples are described to illustrate the applications of the codiagnosability and its 
computing method. 

Index Terms: Discrete event systems, failure diagnosis, decentralized diagnosis, stochas- 
tic automata, codiagnosability. 
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I. Introduction 



A discrete event system (DES) is a dynamical system whose state space is discrete and whose 
states can only change when certain events occur [1, 2], which has been successfully applied 
to provide a formal treatment of many technological and engineering systems [1]. In order 
to guarantee performance to a reliable system, the control engineers should design a system 
that runs safely within its normal boundaries. Therefore, failure diagnoses in DESs, which 
are to detect and isolate the unobservable fault events occurring in a system within a finite 
delay, are of practical and theoretical importance, and have received considerable attention 
in recent years [1, 3-34]. 

In the past a long time, most of the research works on failure diagnosis of DESs in the 
literature focused on centralized failure diagnosis usually [3, 5, 9-17, 19, 20, 23-27, 29, 31-34]. 
Many large complex systems, however, are physically distributed systems in nature [6, 7, 21], 
where information diagnosed is decentralized and there are several local sites, in which sensors 
report their data and diagnosers run at each site processing the local observation. Therefore, 
in recent years, more and more research works have devoted to decentralized failure diagnosis 
[4, 6-8, 18, 21, 22, 28, 30]. 

As we know, the classical DES models cannot distinguish between strings or states that 
are highly probable and those that are less probable, and the notion that a failure can be 
diagnosed after a finite delay is "all-or-nothing" [31]. Stochastic automata, as a natural gen- 
eralization for deterministic automata of different types, are a more precise formulation of the 
general DES models, in which a probabilistic structure is appended to estimate the likelihood 
of specific events occurring [31]. An introduction to the theory of stochastic automata can 
be found in [2]. 

More recently, by generalizing the diagnosability of classical DESs [25, 26] to the setting 
of stochastic discrete event systems (SDESs), the diagnosability of SDESs was interestingly 
dealt with by J. Lunze and J. Schroder [16], D. Thorsley and D. Teneketzis [31]. In [16], 
the diagnostic problem was transformed into an observation problem, and the diagnosability 
was obtained by an extension of an observation algorithm. In [31], the notions of A- and 
AA-diagnosability for stochastic automata were defined, which were weaker than those for 
classical automata introduced by Sampath et al [25, 26], and they presented a necessary and 
sufficient condition for the diagnosability of SDESs. However, the failure diagnosis considered 
in SDESs was centralized. Therefore, motivated by the importance of decentralized failure 
diagnosis, our goal is to deal with the decentralized failure diagnosis for SDESs. 

In this paper, we formalize the approach to decentralized failure diagnosis in SDESs by 
introducing the notion of codiagnosability. The centralized failure diagnosis in SDESs [16, 
31] can be viewed as a special case of the decentralized failure diagnosis presented in this 
paper with only one projection. Roughly speaking, a language generated by a stochastic 
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automaton is said to be codiagnosable under some local projections if, after a failure event 
occurs, there exists at least one local site such that the probability of non-diagnosing failure is 
sufficiently small within a finite delay. By constructing a codiagnoser from a given stochastic 
automaton with multiple projections, we can use the codiagnoser associated with the local 
diagnosers to test codiagnosability condition of SDESs. As well, a number of basic properties 
of the codiagnoser is investigated. In particular, a necessary and sufficient condition for 
the codiagnosability of SDESs is presented, which generalizes the result of classical DESs 
dealt with by W. Qiu and R. Kumar [21]. Furthermore, we propose a computing method in 
detail to check whether codiagnosability is violated. Finally, some examples are described to 
illustrate the applications of the codiagnosability and its computing method. 

This paper is organized as follows. Section II serves to recall some related concepts and 
notations concerning failure diagnosis of DESs and SDESs. In Section III, we introduce a 
definition of the codiagnosability of SDESs. The codiagnoser used to detect failure in SDESs 
is constructed. In Section IV, some main properties of codiagnoser are investigated. In 
particular, a necessary and sufficient condition for the codiagnosability of SDESs is presented. 
As well, we give a computing method in detail to check whether codiagnosability is violated, 
according to the codiagnoser and the local stochastic diagnosers. Furthermore, some examples 
are provided to illustrate the condition of the codiagnosability for SDESs. Finally, in Section 
V, we summarize the main results of the paper and address some related issues. 



II. Notations and preliminaries 

In this section, we present some preliminaries concerning stochastic automata and centralized 
failure diagnosis of SDESs. For more details on SDESs, we can refer to [2,16,31]. 

A. Stochastic Automata 

A stochastic automaton is a finite state machine (FSM) with a probabilistic structure. 
Definition l[31j: A stochastic automaton is a type of systems with a quadruple 

G = (Q,X,r,,qo), (1) 

where Q is a finite state space; go £ Q is the initial state; £ is a finite set of events; rj : 
Q x £ x Q — > [0, 1] is a state transition function: for any q, q <G Q and any a G S, n(q, a, q) 
represents the probability that a certain event a will occur, together with transferring the 
state of the machine from a given state q to the specified state q . For example, rj(q, a, q) = 0.7 
means that, if the machine is in state q, then with probability 0.7 event o will occur, together 
with transferring to state q . 
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For the sake of simplicity, we assume like [31] that, for a given state q G Q and a given 
event a G S, there exists at most one state q G Q such that r](q, a, q) > 0. Therefore, we can 
sometimes use the symbol rj(q,a) instead of rj(q,a,q) hereafter. Moreover, we recursively 
define 

Pr(a \ q) = r](q, a), Pr{sa \ q) = Pr(s \ q)r](q , a), (2) 

where a G S, s G X* and r](q,s,q) > 0. Intuitively, Pr(a \ q) or Pr(sa \ q) represents the 
probability of event a or string so being the next event or string when the system is in state 
q. We can simply denote them by Pr(o~) and Pr(sa), respectively, if no confusion results. 

Some events in £ occurring can be observed by the sensors, while the rest are unobservable. 
That is, £ = S u U S uo , where S Q represents the set of observable events and T, uo the set of 
unobservable events. Let Sj C E denote the set of failure events which are to be diagnosed. 
Without loss of generality, we can assume that Sj- C £ uo , as [24, 28, 29, 34]. And is 
partitioned into different failure types 

S / = S Jl US /2 U...US /ra . 

If a failure event <r 6 Sj. occurs, we will say that a failure type F{ has occurred. 

The language generated by a stochastic automaton G, denoted by L(G), or L for simplic- 
ity, is the set of all finite strings with positive probability. That is, 

L = {s€Z* :(3qeQ) V (q ,s,q)>0}. (3) 

A trace s G L is called to be a deadlocking trace if no further continuations exist after it 
is in L, i.e., {s} X* n L = {s}. Without loss of generality, we assume that L is deadlock- 
free. Otherwise, we can extend each deadlocking trace by an unbounded sequence of a newly 
added event that is unobservable to all diagnosers. This will make the language deadlock-free 
without altering any properties of diagnosability [12, 21]. 

When a system execution is observed by an observation, events executed by the system 
are filtered and the unobservable events are erased by a projection. 

Definition 2: A projection P : S* — > S* is defined: P(e) = e, and for any a G S, s G £*, 
P(so-) = P(s)P(a), where 

fw = {"' "'l^r (4) 

[ e, it a G lu uo . 
And the inverse projection of string y G S* is defined as 

p- 1 (y) = {s£L:P( S )=y}. (5) 

We further need some notations. For string s G £*, s and Sf denote the prefix-closure of 
s and the final event of string s, respectively. We define 

L/s = {t G S* : st G L} , (6) 
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= {s<r f eL:a f eZ fi }, (7) 

L(G, q) = {seZ*: (3q € Q)rj(q, s, q) > o} . (8) 

Intuitively, L/s represents the set of continuations of the string s, ^(S/J denotes the set of 
all traces of L that end in a failure event belonging to the class £y\, and L(G,q) denotes the 
set of all traces that originate from state q £ Q. 



B. Centralized Failure Diagnosis of SDESs 

Before discussing the decentralized failure diagnosis of SDESs, we recall the centralized failure 
diagnoses of SDESs investigated in [31]. 

Definition 3 [31]: Let L be a language generated by a stochastic automaton G = (Q, S, n, go) 
and let P : S* — ► S* be a projection. L is said to be A-diagnosable with respect to P if 

(Ve > 0)(3n E N)(Vs € *(E/.) An > no) 
{Pr(£ : L>(st) = | t € L/sA || t ||= n) < e} 

where the diagnosability condition function D : S* — > {0, 1} is defined as follows: 

flM J'' ifa-€P-'[PM]^E /(e „, 
[ 0, otherwise. 

Roughly speaking, L being A-diagnosable means that after a failure occurs, the probability 
that a string cannot be detected is sufficiently small within a finite delay. For simplicity, we 
will call it diagnosable instead of A-diagnosable. 

The stochastic diagnoser Gd constructed in [31] is as follows: 

G d = (Q d ,E ,6 d ,xo,&,<M, (11) 

where Q d is the set of states of the diagnoser with initial state xo = {{lo, N)}, S d is the set 
of observable events, 5 d is the transition function of the diagnoser, $ is the set of probability 
transition matrices, and 4>o is the initial probability mass function on xo- 

Some concepts concerning finite state Markov chain are used to derive the results of [31], 
and we briefly recall them. Suppose that x and y are two states of a Markov chain. The 
symbol p xy represents the probability that if the Markov chain is in state x, it will visit state 
y at some point in the future. For a state x, if p xx = 1, then x is called a recurrent state. 
Otherwise, if p xx < 1, then x is called a transient state. 

We now quote the basic properties related to transient or recurrent states from [31]. 

Lemma 1 (Lemma 1 in [31]): Let V be the set of transient states of a Markov chain and 
let x be an arbitrary state of the chain. Then for any t G L(G, x) and any e > 0, there exists 
n € N such that 

Pr(t : S(x, t)€T\t€ L(G, x)A \\ t \\= n) < e. (12) 



Lemma 2 (Property 4 in [31]): All components reachable from a recurrent state bearing 
the label in an Fj-uncertain element of Qd are contained in Fj-uncertain elements. 

Using the stochastic diagnoser Gd, Thorsley and Teneketzis [31] presented a necessary 
and sufficient condition for diagnosability as follows: 

Lemma 3 (Theorem 3 in [31]): A language L generated by a stochastic automaton G is 
diagnosable, if and only if, every logical element of its diagnoser Gd containing a recurrent 
component bearing the label F is F-certain. 

III. Codiagnosability and Codiagnoser for SDESs 

In order to illustrate the solution to the decentralized failure diagnosis problem, we make the 
following assumptions about the stochastic automaton G = (Q, £, 77, go) as [31]: 

(Al): The language L = L(G) is live. That is to say, for any q G Q, 

£ £»7(W) = i- (13) 

(A2): There does not exist any cycle of unobservable events, i.e., 

(3n G N)(Vust G L)[(s G E^) (|| s ||< no)]. 

Intuitively, assumption (Al) means that the sum of the probability of all transitions from 
each state is equal to one, which indicates that transitions will continue to occur in any state. 
Assumption (A 2) ensures that G does not generate arbitrarily long sequences of unobservable 
events, because failure diagnosis is based on observable transitions of the system. 

A. Approaches to Defining Codiagnosability for SDESs 

In this subsection, we consider decentralized failure diagnosis where there are m local diag- 
nosers to detect system G. The m local diagnosers are assumed to be independent, namely, 
without communicating their observations each other [15, 24-26, 31]. From the m local pro- 
jections Pi : S* — > S* j defined as Definition 2, where i = 1, 2, • • • , m, we can obtain the global 
projection P : S* — > £*, in which 

S D = £ ,i U £ 0i2 U • • • £ , m . (14) 
Now let us give the definition of codiagnosability for SDESs. 

Definition 4- Let G = (Q,T,,n,qo) be a stochastic automaton, L = L{G). Assume 

there are m local projections Pi : £* — > £*j, where i = 1,2, ■■■ ,m. Then L is said to be 
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codiagnosable with respect to {Pi} if 



(Ve > 0)(3n, t G N)(Vs G ¥(£/.) A n > n,)(3j G {1, 2, • • • ,m}) 
{Pr(t : Dj(st) = 0\ te L/sA \\ t \\= n) < e} 



(15) 



where for each j G {1,2, •• • , m}, the diagnosability condition function Dj : S* — > {0, 1} is 
defined by Definition 3, i.e., 

D, (st )=f 1 ' (16) 
[ 0, otherwise. 

Intuitively, L being codiagnosable means that, for any a trace s that ends in a failure 
event belonging to and for any a sufficiently long continuation t of s, there exists at least 
one site j such that, the probability that the jth diagnoser cannot detect the failure among 
the traces indistinguishable from st for site j is sufficiently small within a finite delay. 

Remark 1: Comparing with Definition 3, we know that diagnosability of the centralized 
system [31] can be viewed as a special case of the codiagnosability of the decentralized system 
with m = 1. 

Example 1. Consider the stochastic automaton G = (Q, S, 77, qo) described by Fig.l, where 
Q = {<7o> Qii ■ ■ ■ > <?6}) 9o is the initial state, E = {a, 6, c, d, a uo , aj}, and the set of failure events 
S/ = {c/}- Assume that there are two local projections Pi : S* — > £* ,, where S 0) i = {a, 5}, 
£0,2 = {a,c}, i = 1,2. 



(a, 0.7) 
\-/ (c.0.3) 




(a,l) 



Fig. 1. Stochastic automaton of Example 1. 

We assert that the language L = L(G) is codiagnosable. In fact, for any s G ^(S/), i.e., 
s = Of or s = dcrj, we verify its codiagnosability as follows. 

Case 1. If s = Of, then for any t G L/s and || t ||= n, either t = a n ~ k ~ 1 ba k (where 
< k < n — 1) or t = a n , and we can take the first diagnoser to detect the failure. 

When t = a n ~ k ~ 1 ba k , we have 

P^iP^st)} = {o f a n ~ k - 1 ba k : < k < n - l} . 
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Due to 07 G <T/a n k 1 ba k for all fee [0,n - 1], we get Di(st) = 1. Therefore, the failure is 
diagnosed. When t = a n , we have 

Pf^PiCst)] = {da f a n ,<Tfa n ,<T w ,a n ,da f a n - k ca k : < k < n- l} . 

Due to (jf ^ cr uo a n , we obtain D±(st) = 0. In this case, Pr(t) = Pr(a n ) = 0.8™, and with n 
increasing, the probability that is not diagnosable approaches to zero. 

Case 2. If s = do~f, then for any t G L/s and || t ||= n, either t = a n ~ k ~ 1 ca k (where 
< k < n — 1) or t = a ra , and we can take the second diagnoser to detect the failure. 

When t = a n ~ k ~ 1 ca k , we have 

P 2 _1 [i^(5*)] = [da f a n - k - 1 ca k : < A; < n - l} . 

Due to a/ € dafa n ~ k ~ 1 ca k for all G [0,n — 1], we get D2(st) = 1. Therefore, the failure is 
diagnosed. When i = a n , we have 

P 2 " 1 [P 2 (st)] = {da f a n , a f a n , a uo a n , a f a n - k ba k : < k < n - l} . 

Due to af £ a uo a n , we obtain D2(st) = 0. In this case, Pr(t) = Pr(a n ) = 0.7 n , and with n 
increasing, the probability that is not diagnosable approaches to zero. 

By Definition 4, Case 1 and Case 2 indicate L is codiagnosable. □ 

Before constructing the codiagnoser for SDESs, we first give two propositions for the 
condition of non-codiagnosability, which can be straight obtained from Definition 4. 

Proposition 1: Let G = (Q,£,77, qo) be a stochastic automaton, L = L(G). Assume there 
are m local projections Pj : X* — > S* i5 where i = 1, 2, • • • , m. If there exist io G {1, 2, • • • , m}, 
such that L is diagnosable with respect to Pj , then L is codiagnosable with respect to {Pi}. 

Proof: If there exists iq G {1,2, •• • , m}, such that L is diagnosable with respect to Pj , 
then from Definition 3, the following holds: 

(Ve > 0)(3n € N)(Vs A ra > n ) 

{Pr(t : A (si) = | t G L/sA || t \\= n) < e}. 

Therefore, we have 

(Ve > 0)(3m = n )(Vs G *(E A ) An > m)(3j = i ) 
{Pr{t : Dj(st) = | t G L/M || i ||= n) < e}. 

It indicates that L is codiagnosable with respect to {Pi : i = 1, 2, ■ ■ • , m} by Definition 4. □ 

Remark 2: This proposition shows that a system can detect all of the failure strings if 
a local diagnoser can detect them. However, the inverse proposition does not always hold. 
That is, there exists the case that a system can still detect all of the failure strings even if all 
of the local diagnosers cannot detect the failures. Example 2 verifies this view. 
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Example 2. For the stochastic automaton G = (Q,T,,r],qo) as in Example 1, we have 
known that the language L is codiagnosable from Example 1. However, in the following we 
prove that L is not diagnosable with respect to Pi : S* — ► S* l5 neither is L diagnosable with 
respect to P2 : X* — > S* 2, where £ 0i i = {a, 6} and £ D ,2 = {a, c}. 

In fact, for the first projection Pi : S* — > S* )l5 we can take e = 0.2, s = do/ G and 
£ = aca ra ~ 2 G L/s, then, 

Pf^PiCst)] = {^ / a n ~ 1 ,CT / a"- 1 ,cj uo a n - 1 ,da / a n - 1 - /c ca A; : < k < n- l} . 

Because <r/ £ a uo a n ~ x , the diagnosability condition function Di(s£) = 0. But 

Pr(£ : L>i(s£) = | £ € L/sA || £ ||= n) = Pr(aca n ' 2 ) = 0.21 > e. (19) 

Similarly, for the second projection P2 : £* — > S* 2 , we can take e = 0.1, s = <r/ G 
and £ = aba n ~ 2 E L/s, then, 

P 2 - 1 [P 2 (s£)] = {d CT/ a n - 1 ,a / a n - 1 ,cj uo a n - 1 ,cj / a n - 1 " fe 6a fc : < fc < n - l} . 

Because ay a uo a n ~ x , the diagnosability condition function D 2 (st) = 0. But 

Pr(£ : D 2 (st) = | £ G L/sA || £ ||= n) = Pr(a6a n " 2 ) = 0.16 > e. (20) 

Eqs. (19, 20) indicate that L is not diagnosable with respect to Pi, neither is L diagnosable 
with respect to P2. □ 

Proposition 2: Let G = (Q, S, 77, qo) be a stochastic automaton, L = L(G). Assume there 
are m local projections P« : S* — > S* j, where i = 1, 2, • • • , m. L is not codiagnosable with 
respect to {Pi}, if and only if, 

(Be > 0)(Vm G N)(3a G *(E A ) A n > n*)(3t G L/s)(Vj G {1, 2, • • • , m}) 
{Pr(£ : Dj(st) = | £ G L/sA || £ ||= n) > e}. 



Proof: It can be readily obtained from Definition 4. □ 

Remark 3: If m = 2 and = {0/}, then L being not codiagnosable means the following: 
there exists e > 0, such that for any in G N, there exist s G ^(Sj), £ G L/s, u\ G Pf^P^st)], 
and W2 G P 2 _1 [P2(s£)], satisfying ^ wi, ^ W2, and 

Pr(£ : Di(st) = | £ G L/sA || £ ||= n) > e, (22) 

Pr(£ : D 2 (st) = | £ G L/sA || £ ||= n) > e. (23) 
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B. Construction of Codiagnoser from a Stochastic Automaton 



Firstly, we will define a logical finite state automaton from a given stochastic automaton. 

Definition 5: Let G = (Q, S, n, qo) be a given stochastic automaton. The deterministic 
finite automaton (DFA) deduced by G is defined as G' = (Q,Ti,5,qo) with the same sets of 
states and events, but the partial transition function 5 : Q x X — > Q in G' is determined by 
probability function n : Q X £ X Q — ► [0, 1]: for any q,q € Q and any cr G S, 

8(q,<r)=q iff n{q,a,q)>Q. (24) 

And 5 can be extended to S* in the usual manner, i.e., for any q e Q, s £T,* and a G S, 

%, e) = 9, %, scr) = 6(S(q, s),a). 

It can be readily verified that L(G) = L(G'). 

We now present the construction of the codiagnoser for SDESs, which is a DFA built on 
a given stochastic automaton G = (Q,T,,r),qo) with some local observations. Without loss 
of generality, assume there are two local projections Pj : S* — > where i = 1,2. We 
construct the codiagnoser for SDESs in terms of the following steps. 

Step 1: Construct a diagnoser G D for the DFA G' deduced by G. 

Let G = (Q,T,,5,qo) be the DFA deduced by G according to Definition 5. From the 
global projection P : S* — > £*, where S Q = S 0) i U S ,2 ; we can construct a diagnoser G D for 
G' by means of the approach in [25, 26], i.e., 

G' D = (Q D ,Z ,5 D ,xo), (25) 

where Qd is the set of states of the diagnoser, S D = US 0j 2, 6~d is the transition function 
of the diagnoser, and the initial state of the diagnoser is xo = {{<l0i N)} G Qd- 

Step 2: Construct the local stochastic diagnosers {G l d : i = 1,2} for G. 

According to the projections Pj : S* — > E* j, where i = 1,2, we can construct two local 
stochastic diagnosers G l d and by means of the approach in [31], i.e., 

GS = (Qi,E 0i i, < 5i,xo,*i,^o), (26) 

G2 = (Q 2 ,S Oi2 ,5 2 ,xo,$2,0o), (27) 

where and $2 are the sets of probability transition matrices, and 4>o is the initial probability 
mass function on xo, and each element qj <G Q\ or qf G Q2 is of the form 

Qi = ■ ■ ■ . . = {(4,4), ■ ■ ■ , . (28) 

where q\j,q% G Q and G A = {iV} U 2^ Fl '-' Ffe >. We can refer to [31] for the details. 
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Step 3: Construct the codiagnoser Gt of testing the codiagnos ability for G. 

Although system G is a stochastic automaton, the codiagnoser that we will construct 
subsequently to test the codiagnosability is a DFA, which is interpreted as follows. On the 
one side, the local diagnosers G\ and G\ are stochastic, so the codiagnoser being DFA has also 
appended a probabilistic structure through G\ and G\. On the other side, we can decrease 
the cost of constructing the codiagnoser since a DFA is simpler than a stochastic automaton. 

The codiagnoser of testing the codiagnosability for G is constructed as a DFA 

G T = (Q T ,X T ,5 T ,qT), (29) 

where Qt is the set of states of the codiagnoser, St is the set of inputting events, 5t is the 
transition function, and q$ is initial element. More specifically, they are defined as follows: 

(1) Qt = Qd x Qi x Q2, and element q T = (q D , q l ,q 2 ) G Qt is of the form 

q T = (q D , {(ql,i\), ■ • • , (<&, 4)} , {(??,*?), ■ ■ ■ , («*,£)}), (30) 

where q 1 = {{q\,l\), " " " , (<&> 4)} G Qi, and g 2 = {(g 2 ,^ 2 ), ■ • • , (q 2 n , i 2 n )} G Q 2 . A triple 
(<7 D , {qj,£j), {q],0j)) is called a component of q T , where {q},£}) G i? 1 and (q 2 ,? 2 )) G <? 2 - 

(2) S T C E„ x E„ x S , and a T G St is of the form <r T = (<r D , a 1 , a 2 ), where 

= "° e ^ ^ = K' if "^ s ^ (31 , 

\ £, if «»<E„,,, \ £ , if 5 ^E„,, 

(3) The transition function 5t is defined as: for any q T = (q ^ 1 ^ 2 ) G Qt and for any 
<r T = (a D , a 1 , a 2 ) G St, we discuss it by the following three cases. 

i) If a D G S 0; i n S 0)2 , then a T = (a D , cr D , a D ) , and 



8 T (q T ,a T ) = (8 D (q D ,a D ), 6 1 (q\a D ), S 2 (q 2 ,a D )) 

O <5 D ( 9 D ,O^0, ^,0/0, <5 2 (g 2 ,O/0. 

ii) If ct d G S 0) i - S 0i2 , then a T = (a D ,a D ,e), and 

*r(ff r ,^) = (M9 D ,^ D ), h{q\o-% q 2 ) 
& 5 D (q D ,a D )^Q), ^(^,0^0. 

iii) If cr D G S 0j2 - S 0i i, then a T = (a D , e, a D ), and 

*r(! r /) = (fo(9 D .A 9 1 , 



(32) 



(33) 



(34) 



(4) The initial element of Gt is defined as qfi = {xo, Xo, Xo} G Qt, where xo = {(<7o> -W)}- 
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This codiagnoser associated with the local stochastic diagnosers G l d and G 2 d (the part of 
dash line in Fig. 2) will be used to perform decentralized failure diagnosis of SDESs and to 
describe a necessary and sufficient condition of the codiagnosability for SDESs in Section IV. 






Pi 




P2 








* Gt * 







Fig. 2. The architecture of decentralized failure diagnosis of SDESs. 



IV. Necessary and Sufficient Condition of Codiagnosability for 
SDESs 

In this section, we give some properties of the codiagnoser. In particular, a necessary and 
sufficient condition of the codiagnosability for SDESs is presented. And we propose an ap- 
proach in detail to check whether codiagnosability is violated. As well, some examples are 
given to illustrate the results we present. 

A. Some Properties of the Codiagnoser 

Firstly, we give some basic properties of the codiagnosers as follows. 

Proposition 3: Let G = (Q, £,77, qo) be a stochastic automaton with two projections 
Pi : E* — ► S*j (where i = 1,2). Gt = (Qt, Et, <5t, qE) is the codiagnoser of G. For any 
q T = (q D ,q l ,q 2 ) G Q T , there exists s T = (s^s^s 2 ) G T, T such that 

Sd(X0,s D ) = Q D , S 1 ( X o,s l )=q\ 5 2 ( Xo , s 2 ) = q 2 , (35) 

P 1 (s D ) = P 1 (s 1 ), P 2 (s D ) = P 2 (s 2 ), (36) 

where s D G £*, s 1 € E* 1? and s 2 G E* 2 . 

Proof: From the above construction of the codiagnoser, we know that for any q T = 
(q D 1 Q l 1 Q 2 ) £ Qt, there exists s T G E^ such that 5T(qo,s T ) = q T . We prove the proposition 
by induction on || s T |, the length of s T . 
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Basis: If || s T ||= 1, then from (31) we have s T = (a D ,a D ,a D ), or s T = (a D ,a D ,e), or 
S T = ( a D ,e,a D ). It is clear that Eqs. (35, 36) hold. 

Induction: Let 5t(<Zi\ c T ) = q T where q[ = {qi,q\,q 2 ) G Qt- By the assumption of 
induction there exists s T G £ T , where || s T ||= n, such that <5r(g^,s T ) = gf, and Eqs. (35, 
36) hold. There are three cases to be considered for s T a T , where a T = (a D , a 1 , a 2 ). 

Case 1: If a D G £ ,i n E 0>2 , then a D = ct 1 = ct 2 . Therefore, 

M?o ,* T * T ) = <5 T (5 T (^,s T ),a T ) = 5 T (ql,a T ) = q T . 

That is, 

S D ( X 0,s D a D )=q D , 5 1 { XQ ,s 1 a 1 )=q\ 5 2 ( X o, s 2 a 2 ) = q 2 , 
Pi( S D = P 1 (s' D )P 1 ( ( 7 D ) = Px^JPi^ 1 ) = Pi(aV). 
Similarly, we have P 2 (s D cr D ) = P 2 (s 2 a 2 ). 

Case 2: If o- D G S 0j i - S 0j2 , then a D = cr 1 , but a 2 = e. Therefore, 

<MXo,*V) = JiOSiCxo, A* 1 ) = MSiV 1 ) = g\ 

but (5 2 (xO) s 2 0" 2 ) = ^(XO)* 2 ) = Qi = Q 2 - We also have Pi(s D a D ) = Pi(s 1 <r 1 ) for the same 
reason as in Case 1, and 

P 2 (s D a D ) = P 2 (s D )P 2 {a D ) = P 2 (s 2 )e = P 2 (s 2 a 2 ). 

Case 3: If a D G S ,2 — £o,i, then u D = a 2 , but cr 1 = e, we can similarly verify that Eqs. 
(35, 36) hold for s T a T . □ 

Proposition 4 : Let G = (Q, £, 77, go) be a stochastic automaton with two projections 
Pi : X* — > S* j (where z = 1,2) and let Gt = (Qt, St, St, q^) be the codiagnoser of G, and 

9 T = (? fl ,g 1 ,9 2 )eQT. 

(1) If A (?b,^) G g 1 , P G ^ but P £ ^, then there exist wi,w 2 € S* x such that 
%o,^i) = g*, 5(g ,^2) = ql, o-f G wi, cr/ ^ w 2 , and Pi(u;i) = Pi(co 2 ). 

(2) If (g 2 , A (g 2 ,^ 2 ) G g 2 , P G £ 2 but P ^ l\, then there exist ui,t> 2 G £* j2 such that 
%0,^i) = ql, S{q ,v 2 ) = ql, af G v x , a f (£ v 2 , and P 2 {v 1 ) = P 2 (v 2 ). 

Proof: (1) Let (q\, l\) , (q\ , i\) G q 1 , F G but P ^ ^. Since every component in each 
element of Q\ is reachable from the initial state go- Therefore, there exist u>i,u> 2 G S* x such 
that S(qo, w{) = q\ and 5(qo, co 2 ) = q\. By the definition of label propagation function [31], we 
have af G u\ and oj ^ w 2 , because FefJ and F l\. From the construction of diagnoser 
G^, due to both {q\,i\) and (ql,(l) in g 1 , we know that wi and lo 2 have the same strings 
filtered by projection P\. That is, P\{uj\) = Pi(w 2 ). 

(2) It can be proved similarly. □ 
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B. Necessary and Sufficient Condition of Codiagnos ability for SDESs 

In this subsection, we will present the necessary and sufficient condition of codiagnosability 
for SDESs. 

Definition 6: Let Gt = {Qt, St, St, <7(f) be a codiagnoser of a stochastic automaton 
G = (Q, S, n, qo). A set jg^, af, q\ , ovf, . . . , , of, gf j is said to form a cycZe in Gt, if 

*r(gj, oj) = qj +1 , *r(?fc > °I) = Qi, 
where q{ , q%, . . . , q\ G Q T , erf, of, . . . , of G St, and j = 1, 2, . . . , k - 1. 

Definition 7: Let Gt = (Qt,^t, St, q^) be a codiagnoser of a stochastic automaton 
G = {Q,Z,n,q ), and g T = (q D ,q\q 2 ) G Q r . 

(1) If both and c/ 2 are F— certain in diagnoser G\ and diagnoser G 2 ,, respectively, then 
q T is called to be F— certain in Gt- 

(2) If both q 1 and c/ 2 are F— uncertain in G\ and G 2 ,, respectively, then g T is called to be 
F— uncertain in Gt- 

For example, in Fig. 9, the states ({(1, TV)} , {(0, TV)} , {(1, TV)}) and 
({(6, F)} , {(6, F)} , {(5, F), (6, F)}) are F-certain in G T , the state 

({(2, F), (3, F), (4, TV)} , {(2, F), (3, F), (4, TV), (5, F)} , {(2, F), (3, F), (4, TV)}) 

is F-uncertain in G T , but ({(5, F)} , {(2, F), (3, F), (4, TV), (5, F)} , {(5, F), (6, F)}) is neither 
F— certain nor F— uncertain in Gt- 

Definition 8: Let Gt = (Qt, St, St, <?(f) be a codiagnoser of a stochastic automaton 
G = (Q,£,77,tfo)- Let g T = (<? D ,gW) G Qt, and, let (q D ,{q l a ,t a ),(ql,£ 2 b )) be a component 
of g T . If both (g 1 ,^,^) and (g 2 , g 2 , £ 2 ) are recurrent components of g 1 in G^ and q 2 in 
G^, respectively, then (q D , (</*, £*), (q 2 , £ 2 )) is called a recurrent component of q T in Gt- 
Furthermore, if the recurrent component (q D , (q\, i\ ),(q 2 , £ 2 )) satisfies FE<J and F G £ 2 , 
then it is called a recurrent component bearing the label F. 

Definition 9: Let Gt = (Qr, St, St, q]f) be a codiagnoser of a stochastic automaton 
G = (Q,T,,r),q ). Let <? T = (q D ,q l ,q 2 ) G Qt, and, let (<? D , (q 2 , l 2 b )) be a component 

of q T . If = q 2 , l\ = I 2 , and there exists u G L such that 

%o,^) = ^, <5i(xo,i'iH)=g 1 ) <5 2 (xo,F 2 H) =g 2 , (37) 

then the component (q D , (g^,-^), (<? 2 ,^ 2 )) is called uniform. 

For example, in Fig. 5, ({(3, F)} , (3, F), (3, F)) is a uniform component of state q T in 
codiagnoser G T , where g T = ({(3, F)} , {(2, F), (3, F), (4, TV), (5, F)} , {(3, F)}). In fact, we 
can take to = dofca G L which satisfies (37). 
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Proposition 5: Let Gt = (Qt, ^t,^t,Qo) be a codiagnoser of stochastic automaton G = 
(Q, E, 77, qo) with two projections Pi : £* — > £* i; where i = 1, 2. If L is not codiagnosable with 
respect to {p : i = 1, 2}, then there exists an F— uncertain state with a recurrent component 
bearing the label F in Gt- 

Proof: Since L is not codiagnosable, by Proposition 2, there exists e > 0, and for any 
rii G N, there exist s G and t G L/s (where ra > raj), such that 

Pr(t : £>i(st) = I t € L/sA || t ||= ra) > e, (38) 

Pr(t : £> 2 (st) = 0\ te L/sA \\ t \\= ra) > e. (39) 

Denote by 5 D (xo,P(st)) = q D , S^xo, Pi{st)) = q 1 , 5 2 (xo, Pi(st)) = g 2 . We assert that 
(q D , q 1 , q 2 ) G Qt is an P— uncertain state in Gt- Otherwise, if q l G Qi is an F— certain state 
in G\, then for any co G P^ 1 [P\(st)], we have 0/ G u. That is, D\(st) = 1 always holds. 
Therefore, 

Pr(/ : Di(st) = I t G L/sA || t ||= ra) = 0, 

which is in contradiction with (38). So q 1 is an F— uncertain state in G\. Similarly, from 
(39) we can know that q 2 is an F— uncertain state in G\. Hence, (q D ,q 1 ,q 2 ) G Qt is an 
F— uncertain state in Gt- Furthermore, by Lemma 1 and (38, 39), both q 1 and q 2 contain 
respectively a recurrent component bearing the label F. That is, (g^g^g 2 ) G Qt is an 
F— uncertain state in Gt with a recurrent component bearing the label F. □ 

Using the above results, we present a necessary and sufficient condition of the codiagnos- 
ability for SDESs as follows. 

Theorem 1: Let G = (Q, £,77, go) be a stochastic automaton with two local projections 
Pi : £* — > where i = 1,2. Let Gt = (Qt , $T , %) be a codiagnoser of G. Then 
L = L(G) is not codiagnosable with respect to {Pi}, if and only if, there exists a cycle 
C T = {ql , oj, gj +1 , oJ +1 , . . . , g^, oJ +/l , g^ } in Gt such that each state q^ +i with a uniform 
recurrent component bearing the label F is F— uncertain in Gt, where i G [0, /i]. 

Proof: Sufficiency: Assume that there exists a cycle 

u — l^jt , &k > 9k+l' ■ ■ ■ ) 9fc+/»' ^fc+fel 9fc J 

in Gt, such that each state ql +i = isLk+v Qk+i) W1 th a uniform recurrent component 
(denoted by (qj? +i , (q a , (-a), (qaAa))) bearing the label F is F— uncertain in Gt, where i G [0, h\. 
By Definition 9, there exists to G L such that aj £ uj and 

%o,w) = g a , Mxo,PiH) = gfc+i, <5 2 (xo,P2H) = g 2 ^. (40) 

Since g^ +i is a state of the cycle G T , there is a path ending with the cycle C T in Gt- 

path = alal ■ ■ ■ (a\ ■ ■ ■ a^ +i ■ ■ ■ al +h ) n . (41) 
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We take s £ to, t £ L/s and u £ L/ st such that s £ VP(E/), st = to and 
Pi(stu) = ctI<j\ ■ ■ ■ {a\ ■ ■ ■ a\ +i ■ ■ ■ al +h ) n , 

P 2 (stu) = a\a\ ■■■{a 2 k --- a 2 k+i ■ ■ ■ a 2 k+h ) n . 

Notice that q k+i is F— uncertain in Gt, there exist oj\ £ P 1 _1 [Pi(st)] and 0J2 £ P 2 ~ 1 [P2(st)] 
such that af £u)\ and 07 ^ u>2, i.e., Di(st) = and D2{st) = 0. That is, 

Pr(u : Di{stu) = | tu G L/sA || in ||= n) = 1, (42) 

Pr(u : D 2 {stu) = | tu G L/sA || tu ||= n) = 1. (43) 

Furthermore, Pr(t : t G L/s) > since t G L/s. Let < e < Pr(t : £ G L/s), then by (42, 
43) we have 

Pritu : Di(stu) = I tu G L/sA II 11= n) , x 

(44) 

= Pr(t : t G L/s)Pr(u : Di(stu) = \ tu £ L/sA \\ tu \\= n) > e, 

and 

Pr(tu : D 2 {stu) = | tu G L/sA || tu ||= n) 

= Pr(t : t G L/s)Pr(u : D 2 {stu) = \ tu £ L/sA \\ tu || = n) > e. 

By Remark 3, we obtain that L is not codiagnosable with respect to {Pi : i = 1, 2}. 

Necessity: Assume that L is not codiagnosable. By Proposition 2 and Remark 3, there 
is e > 0, such that for any rij G N, there exist s £ Vl/(£j.) and t £ L/s, where || t \\ = n > rij, 
satisfying Ineqs. (22, 23). Therefore, there exist G Pf 1 [Pi(st)] and c<J2 G P 2 ~ 1 [P2(st)} 
such that af $l LO± and a/ ^ CJ2- Let || Q || be the number of states of G. If we take n« big 
enough such that || st \\>\\ Q ||, then there will be a cycle C in G along string st. According 
to Assumption (A 2), the cycle C must contain an observable event in S G . Therefore, there 
exists a cycle C D in diagnoser G' D corresponding to the cycle C, denoted by 

r<D _ f „D D D D D D n\ 

u — \Qk > a k ■>1k+ii a k+\-> ■ ■ ■ ilk+hiVk+hilk / • 
We denote the path in G D ending with the cycle C D as 

path = a°a? ■ ■ ■ a° +h ) n ■ 

According to the construction of the codiagnoser Gt, we can obtain a cycle in Gt'- 

c =\Qk^ cr k^Qk+i^ cr k+ii---,Qk+h^k+hiQkf^ ( 46 ) 
where aj = (aj 3 , aj,aj), j £ [k, k + h]. Denote 

q} = 5 1 ( X o,Pl(st)), ql = <s 2 (xo,iMst)). 
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Notice that st satisfies Ineq. (22, 23). By Lemma 1, both qj Q and qf contain respectively 
a recurrent component bearing the label F. Furthermore, from af € s, aj £ uj\ and aj £ L02, 
we know that both qj and qf are F— uncertain states in G\ and in G\, respectively. That 
is, lj = Qi i Qi ) £ Qt is an F— uncertain state in Gt- 

In the following we will verify that each state qj = (qf,qj,qj) with a uniform recur- 
rent component (denoted by (q® , (q a ,£a), {la,^a))) bearing the label F in the cycle C T is 
F— uncertain in Gt, where qj € Qt and j € [k, k + h]. 

Case 1: If qj = qJ Q , then it has been verified above that qJ Q is F— uncertain in Gt- 

Case 2: Assume qj ^ q[ Q . Due to both qJ Q and qj being states in the cycle C T , there 
exists a component of reachable from the recurrent component of qj Q , and there exists 
a component of qj reachable from the recurrent component of qf Q . Likewise, there exists 
a component of qj Q reachable from the recurrent component {qj,q a ,^a), an d there exists a 
component of qf Q reachable from the recurrent component (g| ,q a ^a)- By Lemma 2, both 
qj and a? are F— uncertain in G^ and in G^, respectively, since qf is F— uncertain in Gt- 
Therefore, qj = {qj ) ,qj,q'j) & Qt is an F— uncertain state in Gt- Q 

Remark Jf.: From the proof of Theorem 1, we know that if there is only one projection 
in system G, then Theorem 1 degenerates to Theorem 3 of [31]. Therefore, the centralized 
failure diagnosis in [31] can be regarded as a special case of the decentralized failure diagnosis 
here. 

C. The Computing Process of Checking the Codiagnos ■ability in SDESs 

Let G = (Q,T,,n,qo) be a stochastic automaton with two projections Pi : S* — > S*^ where 
i = 1,2. G' is a DFA deduced by G. We give a computing process to check whether the 
codiagnosability condition of Theorem 1 is violated. 

Step 1: Construct the diagnoser G D (i.e., Eq. (25)) for the DFA G' and the local stochas- 
tic diagnosers {G^ : i = 1, 2} (i.e., Eqs. (26,27)) for G. 

This specific procedure can be seen in Part B of Section III for the details. 

Step 2: Construct the codiagnoser Gt = (Qt, St, St, q^ ) (i.e., Eq. (29)) for G. 

Also, this specific procedure can be seen in Part B of Section III for the details. 

Step 3: Check whether there exists a cycle in the codiagnoser Gt- 

If there does not exist a cycle in the codiagnoser Gt, then L is codiagnosable with respect 
to {Pi}- Otherwise, we perform the next step. 

Step 4-' Check whether the states in each cycle satisfy the following condition: each state 
with a uniform recurrent component bearing the label F is F— uncertain in Gt- 
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If each state with a uniform recurrent component bearing the label F in each cycle is 
F— uncertain in Gt, then we further perform the next step. Otherwise, L is codiagnosable. 

Step 5: Check whether the codiagnosability is violated. 

If there exists a cycle C T whose each state q T with a uniform recurrent component bearing 
the label F is F— uncertain, then L is not codiagnosable. Otherwise, L is codiagnosable. 



D. Examples of Codiagnosability for SDESs 

In this subsection, we will give some examples to illustrate the applications of the necessary 
and sufficient condition for the codiagnosability of FDESs and its computing method we 
presented above. 

Example 3. Consider the stochastic automaton G as in Example 1. L = L{G). Assume 
there are two projections Pi : S* — > £* j, where i = 1,2 and S 0i i = {a, b}, S Di 2 = {a, c}. 

From Example 2, we know that L is neither diagnosable with respect to P\, nor diagnos- 
able with respect to Pi- But Example 1 shows that L is codiagnosable. In the following we 
use Theorem 1 and the above computing process to test these results. 

According to the global projection P : S* — > S* where S c = S 0> i U £ 0j 2 = {a, b, c}, 
and the projections Pi : S* — > (where i = 1,2), we can construct the diagnoser = 
(Qd, S , <5d 5 Xo) for DFA G' as in Fig. 3, and two local stochastic diagnosers G^,Gj as in 
Fig. 4, where G l d = (Qi, £ ,i,£i,xo, $i, 0o), = (Q2, S ,2, ^2, Xo, $2, <Ao)- 

(a, 01) O ( °'^) O 

(a, 01) 




3F 





6F 




4Nl) 
5F 





Fig. 3. Diagnoser G D in Example 3. Fig. 4. Local diagnosers (left one) and G 2 d (right one) in Example 3. 

For the local stochastic diagnoser G d , the set of probability transition matrices <3?i = 
{0o, 0i,0^,0^,0i,0|}, where O = [1], 4>\ = [0.35, 0.15, 0.2, 0.24], ^ = [0.06], ^ = [1], 
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0.8 
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Therefore, the recurrent components bearing F are (q\,§-, F) and (<?;$, 3, F), where q\ = 
{(6,F)} and q\ = {(2, F), (3, F), (4, A?"), (5, F)}. Notice that 9 £ is not F-certain in G\, so, 
neither is L diagnosable with respect to Pi by Lemma 3. 

For the local stochastic diagnoser G 2 d , the set of probability transition matrices $2 = 
{00, where fa = [1], = [0.35, 0.2, 0.24, 0.06], $ = [0.15], 0§ = [1], 
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Therefore, the recurrent component bearing F are (#2)3, F) and (g|,6,F), where q\ = 
{(3,F)} and g§ = {(2, F), (4, TV), (5, F), (6, F)}). Notice that is not F-certain in G% 
so L is not diagnosable with respect to P2 by Lemma 3, either. 

Now we construct the codiagnoser Gt to test the codiagnosability for G. The codiagnoser 
is a DFA Gt = {Qt, £t, <$t, ^jf) as i n Fig- 5, where St = {(a, a, a), (6, 6, e), (c, e, c)}. 

(a, a, a) 






2F 




3F 


3F 


3F 




4iV 






5F 





(a, a, a) 







2F 


6F 


6F 


4A 7 


5F 






6F 



(a, a, a) 



Fig. 5. Codiagnoser G T in Example 3. 

From Fig. 5, we know that there are three cycles Cf, Cj, Cj in G T as follows: 
Cf = {qZ,{a,a,a),qj} , Cf = {q£, (a, a, a), gj} , Cf = [qj , (a, a, a), gj} , (47) 
where 

<& = ({(3, F)} , {(2, F), (3, F), (4, iV), (5, F)} , {(3, F)}), 
<?J = ({(2, F), (4, iV), (5, F)} , {(2, F), (3, F), (4, TV), (5, F)} , {(2, F), (4, TV), (5, F), (6, F)}), 
ql = ({(6, F)} , {(6, F)} , {(2, F), (4, TV), (5, F), (6, F)}). 

In cycle C^, state q\ contains a uniform recurrent component ({(3, F)} , (3, F), (3, F)) 
bearing the label F, but it is not F— uncertain in Gt- In cycle Cj , state is an F— uncertain 
state of Gt, but it does not contain any uniform recurrent component. Likewise, in cycle Cjf , 
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state q£ contains a uniform recurrent component ({(6, F)} , (6, P), (6, F)) bearing the label 
F, but it is not F— uncertain in Gt- Therefore, there does not exist the cycle whose each 
state with a uniform recurrent component bearing the label F is F— uncertain. By Theorem 
1, we know that L is codiagnosable, which coincides with the result of Example 1. □ 

Example 4- Consider the stochastic automaton G = (Q, E, r], qo) represented by Fig. 6, 
where Q = {qo, . . . , q^}, £ = {a, b, c, d, a uo , cr/}, and £/ = {c/}- L = L(G). Assume there 
are two projections Pj : S* — > S* i5 (where i = 1,2), S 0j i = {a, b}, S 0j2 = {a, d}. 




(a,l) 

Fig. 6. Stochastic automaton of Example 4. Fig. 7. Diagnoscr g' d in Example 4. 

We assert that L is not codiagnosable with respect to {Pi : i = 1, 2}. In fact, we can verify 
this conclusion by two scenarios as follows. 

On the one side, we use the definition of codiagnosability of SDESs (i.e., Definition 4) 
to interpret L to be not F-codiagnosable with respect to {Pi : i = 1,2}. We take e = 0.2, 
s = daf G *(£/), and t = aca n ~ 2 G L/s, then 

P^iP^st)} = {da uo a n - l : a f a n - l ,da f a n - l ,d(j f a n - k - l ca k : < k < n - l} , 

P 2 ^ 1 [P 2 (si)] = {da w a n - 1 ,da f a n - 1 ,da f a n - k - 1 ca k : < fe < n - l} . 
Notice that <r/ ^ <i(T uo a n_1 , so Di(st) = and Dz{st) = 0. However, 

Pr(t : £>i(st) = | t G L/sA || i ||= n) = Pr(aca n - 2 ) = 0.7 x 0.3 = 0.21 > e, (48) 

Pr(t : D 2 (st) = | t G L/sA || i ||= n) = Pr(aca n " 2 ) = 0.7 x 0.3 = 0.21 > e. (49) 

Therefore, L is neither diagnosable with respect to P\ nor diagnosable with respect to P 2 . 
By Definition 4 or Proposition 2, we obtain that L is not codiagnosable. 

On the other side, we also can use Theorem 1 to verify that L is not codiagnosable. 

According to the global projection P : S* — > S* and the local projections Pj : S* — > S* j, 
(i = 1,2), we can construct the diagnoser G' D = (Qd,^o,^DiXo) f° r DFA G' as Fig. 7, and 
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two local stochastic diagnosers G\, G\ as Fig. 8, where S G = S 0i i U X 0i2 = {a, b, d}, and 



G\ = (Qi, E 0j i, <5i, xo, $1, </>o), = (Q 2 , S 0)2 , 5 2 , xo, $2, </>o)- 




Fig. 8. Local diagnosers (left one) and G^ (right one) in Example 4. 



For the local stochastic diagnoser G d , the set of probability transition matrices <E>i = 
{4> Q A\AlA\A\Al}, where <f> = [1], 0} = [0.392,0.168,0.14,0.24], 2 = [0.06], $ = 
[1], 
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Therefore, the recurrent component bearing F are ((? 2 ,6, F) and (93, 3, F), where q\ = 
{(6, F)} and q\ = {(2, F), (3, F), (4, TV), (5, F)}). Notice that ^ is not an F-certain state of 
G\, so L is not diagnosable with respect to P\ by Lemma 3. 

For the local stochastic diagnoser G^, the set of probability transition matrices $2 = 
{00, (f>l 4>l <t>l <t>% <t>\] where O = [1], 0? = [0.24, 0.06], <jfc = [0.7], ^ = [0.56, 0.24, 0.2], 
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Therefore, the recurrent component bearing F are (g 2 ,6, F) and (g|,3, F), where q\ = 
{(5,F), (6,F)} and q\ = {(2, F), (3, F), (4, N)}). Notice that q\ is not F-certain in G% 
so L is not diagnosable with respect to P 2 by Lemma 3, either. 
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Fig. 9. Codiagnoser G T in Example 4. 

Now we construct the codiagnoser Gt to verify that L is also not codiagnosable. The co- 
diagnoser is a DFA Gt = (Qt, St, St, q$) as Fig. 9, where £t = {(a, a, a), (6, 6, e), (d, e, d)}. 

From Fig. 9, we know that there are three cycles Cf , Cj , Cj in G T as follows: 
C T = {qI, (a,a,a),^} , Cj = {ql ,(a,a,a),qj} , = ^qj , (a,a,a),q^ , (50) 

where 

<?J = ({(2, F), (3, F), (4, N)} , {(2, F), (3, F), (4, TV), (5, F)} , {(2, F), (3, F), (4, TV)}), 

= ({(5, F)} , {(2, F), (3, F), (4, iV), (5, F)} , {(5, F), (6, F)}), 
g 5 T = ({(6,F)},{(6,F)},{(5,F),(6,F)}). 

In the cycle Cj, there is only one state qj and it contains a uniform recurrent component 

({(2,F),(3,F),(4,7V)},(3,F),(3,F)) 

bearing the label F. Furthermore, c/J is an F— uncertain state of Gt- Therefore, there does 
exist a cycle (i.e., Cf) whose each state with a uniform recurrent component bearing the 
label F is F— uncertain. By Theorem 1, we obtain that L is not codiagnosable. □ 



V. Concluding Remarks 

Recently, J. Lunze and J. Schroder [16], D. Thorsley and D. Teneketzis [31] generalized the 
diagnosability of classical DESs [25, 26] to the setting of stochastic DESs (SDESs). In [16], 
the diagnostic problem was transformed into an observation problem, and the diagnosability 
was obtained by an extension of an observation algorithm. In [31], the notions of A- and 
AA-diagnosability for stochastic automata were defined, which were weaker than those for 
classical automata introduced by Sampath et al [25, 26], and they [31] presented a necessary 
and sufficient condition for the diagnosability of SDESs. 
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However, the failure diagnosis they considered in [16, 31] was still centralized. In this 
paper, we have dealt with the decentralized failure diagnosis for SDESs. The centralized 
failure diagnosis of SDESs in [16, 31] can be viewed as a special case of the decentralized failure 
diagnosis presented in this paper with only one projection. We formalized the approach to 
decentralized failure diagnosis by introducing the notion of codiagnosability. By constructing 
a codiagnoser from a given stochastic automaton with multiple projections, we used the 
codiagnoser associated with the local diagnosers to test codiagnosability condition of SDESs. 
As well, a number of basic properties of the codiagnoser has been investigated. In particular, 
a necessary and sufficient condition for the codiagnosability of SDESs was presented, which 
generalizes the result of classical DESs dealt with by W. Qiu and R. Kumar [21]. Furthermore, 
we gave a computing method in detail to check whether codiagnosability is violated. Finally, 
some examples were described to illustrate the applications of the codiagnosability and its 
computing method. 

The problem of decentralized diagnosis can be considered as one special case of distributed 
diagnosis in [7]. Therefore, the potential of applications of the results in this paper may be in 
failure diagnosis of many large complex systems which are physically distributed [7, 21, 22, 
28]. Moreover, with the results obtained in this paper, a further issue worthy of consideration 
is the strong codiagnosability of SDESs, as the strong codiagnosability of classical DESs [21]. 
Another important issue is how to compute the bound in the delay of decentralized diagnosis 
for SDESs. We would like to consider them in subsequent work. 
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